Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jCU2tzLxHrrPfite0lGYEFTOjBA.roa
File: jCU2tzLxHrrPfite0lGYEFTOjBA.roa (raw, json)
Hash identifier: sgYXl/BOqykKxMomOomSzR3/zp59cbIFmU2SSZNq008=
Subject key identifier: 8C:25:36:B7:32:F1:1E:BA:CF:7E:2B:5E:D2:51:98:10:54:CE:8C:10
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018CE5DD33595B903891B50821D8F20B0CDC
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jCU2tzLxHrrPfite0lGYEFTOjBA.roa
Signing time: Sun 07 Jan 2024 21:38:48 +0000
ROA not before: Sun 07 Jan 2024 21:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204026
IP address blocks: 213.181.203.0/24 maxlen: 24
213.181.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:dd:33:59:5b:90:38:91:b5:08:21:d8:f2:0b:0c:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Jan 7 21:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c2536b732f11ebacf7e2b5ed251981054ce8c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:67:f7:35:64:cd:b0:50:ac:93:85:88:86:50:
32:8d:b2:f8:15:44:61:1d:57:67:f5:33:3c:ba:7c:
f2:74:cd:13:a1:d5:77:26:8f:3d:c5:4b:57:f0:81:
c6:a4:be:00:6f:35:e2:16:5a:a4:6f:ac:4d:8d:df:
c4:0f:02:3c:30:3b:f4:14:8d:13:ee:18:5c:b8:50:
ec:c4:b9:06:78:32:78:07:e4:65:8f:f8:d1:39:34:
df:44:e0:41:02:03:bc:77:88:16:3b:d4:98:44:55:
58:b5:1d:54:bf:fa:10:4f:c8:77:04:20:2d:4b:43:
45:05:68:71:1b:3f:c5:b9:95:35:70:31:ad:5d:65:
78:d2:82:82:60:42:ff:84:de:69:eb:5b:74:96:ac:
5f:82:07:90:cf:9c:76:c0:05:3b:da:eb:a1:9c:9b:
20:6c:99:d5:02:34:cf:65:bd:70:f1:bc:61:9f:2d:
e3:e8:b1:cf:e6:a8:0b:21:4b:b9:da:50:fb:3e:9f:
e6:d5:bd:17:a6:32:f8:e4:f1:74:7b:4f:75:5e:d3:
0a:b8:36:69:ec:ae:cb:01:bd:a4:77:d3:02:d0:69:
84:0c:e4:4f:ff:5c:0c:48:f2:4c:ef:61:ac:47:4c:
7c:e4:49:39:40:64:d8:88:04:bf:55:42:18:66:bb:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:25:36:B7:32:F1:1E:BA:CF:7E:2B:5E:D2:51:98:10:54:CE:8C:10
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/jCU2tzLxHrrPfite0lGYEFTOjBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.181.202.0/23
Signature Algorithm: sha256WithRSAEncryption
72:5d:a6:f4:b7:92:0e:7b:f9:21:c2:b9:04:e8:2c:e5:4a:af:
c6:d1:bc:ff:e7:00:8d:46:a4:db:f9:c5:da:fa:87:81:59:84:
04:b0:e0:37:a5:84:8d:0c:26:0d:eb:f5:bc:1d:b4:dc:c5:5a:
90:e3:fa:2f:fc:0d:c6:87:f2:49:be:37:8d:79:b7:0f:47:7b:
f3:ee:2e:7d:ea:57:0c:b2:d2:9f:6b:29:aa:0e:57:60:00:46:
61:d0:13:22:59:0d:f4:c7:56:b4:b2:66:3b:bc:c1:d3:55:a2:
da:78:29:ce:86:64:ab:41:69:3b:a2:ea:7c:65:e9:d7:64:93:
b2:8f:74:9c:b7:e2:57:ad:09:5c:96:2b:45:6c:d1:b3:77:60:
db:8a:ec:22:81:7d:03:14:86:84:f6:5f:7d:12:cb:6f:95:40:
7b:2f:a2:4b:4f:07:bf:f1:b3:9d:02:86:54:58:ad:db:15:29:
5a:97:0e:e0:e7:2b:87:44:16:ca:81:a1:43:48:82:27:33:17:
cc:ae:28:5f:e8:41:bc:42:b5:6d:08:4c:f7:48:6c:ca:0d:12:
e9:ae:e1:13:4d:8f:02:2c:45:27:7d:67:a5:32:b8:49:14:a7:
16:b1:5c:62:83:ef:a8:d9:d4:40:3e:c5:0b:75:1d:f0:5f:90:
54:81:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:27:54 2024 by rpki-client on console-fra.rpki-client.org